Skip to content

harxhith/Cipher

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

22 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

CIPHER: Edge-AI IoT Security & Threat Response

License: MIT Hardware: Raspberry Pi Hardware: ESP32 Live Demo

Cipher is a live, end-to-end IoT security demonstration platform. It demonstrates how a low-cost edge gateway (Raspberry Pi) can detect, score, and mitigate malicious IoT behavior in real-time without relying on cloud-based AI.


🌐 Live Preview

Try the interactive dashboard demo — no hardware required.

https://cipher-demo.netlify.app/

The demo simulates a real attack scenario: an ESP32-CAM device on the network begins exfiltrating data to a cloud C2 server. Click "Simulate Attack" to watch the threat detection and auto-mitigation play out in real-time on the 3D globe.


🏗️ System Architecture

  1. Edge Gateway (Raspberry Pi): The "Defender". Sniffs traffic and scores threats.
  2. Cybersecurity Dashboard (React/3D): The "Command Center". Real-time 3D visualization.
  3. Cloud C2 Server (Node.js): The "Attacker". Triggers attacks and receives stolen data.
  4. Compromised IoT Nodes (ESP32): The "Targets". Perform attacks on command.

🚀 Quick Start Guide

1. Cloud C2 Server (The Attacker)

./attack.sh

Note: This will automatically start the server and print the public URL (e.g., http://35.212.229.239:5000).

2. Edge Gateway & Dashboard (The Defender)

./defend.sh

Note: This will automatically start the server and print your public ngrok URL. It will ask for your password to run the packet sniffer.

3. ESP32 Firmware

Flash the firmware to your ESP32-CAM using Arduino IDE or PlatformIO.

  • File: esp32cam/esp32cam.ino
  • Configure your Wi-Fi SSID and Password in the code before flashing.

🚀 Attack Scenarios

  • Data Exfiltration: ESP32-CAM steals images and uploads them to the Cloud C2.
  • DDoS (UDP Flood): IoT nodes weaponized to flood a target server.
  • Local Reconnaissance: Devices scanning the local network for vulnerabilities.

🛠️ Tech Stack

  • Frontend: React 19, Three.js, Framer Motion, Tailwind CSS 4
  • Backend: Node.js (C2), Python/Scapy (Gateway)
  • Firmware: C++ (Arduino)

📄 License

This project is licensed under the MIT License. See the LICENSE file for details.


Built for the future of network security visualization.


👥 Contributors